diff --git a/.github/workflows/manual-release.yml b/.github/workflows/manual-release.yml
index afec293a..d7a1dc5f 100644
--- a/.github/workflows/manual-release.yml
+++ b/.github/workflows/manual-release.yml
@@ -18,6 +18,13 @@ on:
         description: 'Skips the creation of a release if there are no changes. Boolean: true or false'
         default: 'true'
         required: false
+
+# Needed by release.sh (pushes a release branch) and by repo-sync/pull-request
+# (opens the release PR against master).
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   create_release:
     env:
diff --git a/.github/workflows/scheduled-release.yml b/.github/workflows/scheduled-release.yml
index e89a91f6..1fc29631 100644
--- a/.github/workflows/scheduled-release.yml
+++ b/.github/workflows/scheduled-release.yml
@@ -2,6 +2,13 @@ name: Scheduled Release
 on:
   schedule:
     - cron:  '14 3 * * 0' # every Sunday at 03:14 UTC
+
+# Needed by release.sh (pushes a release branch) and by repo-sync/pull-request
+# (opens the release PR against master).
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   create_release:
     env: